Instagram MCP server, with a policy gate.
Gentkey connects Instagram through its own Meta app and Instagram's content publishing API, so an agent can read an account and draft posts freely while each publishing surface (feed, Reels, Stories) stays behind its own revocable, rate-capped grant.
https://app.gentkey.com/mcpclaude.ai (web & mobile) · Claude Code · Cursor · any MCP clientWhat’s free, what needs a grant.
Reads: Account discovery through linked Facebook Pages, recent media with permalinks and like/comment counts, and Instagram's 24-hour API publishing quota work with no grant.
Writes: Four typed writes publish a single image, a carousel, a Reel, or a Story. Each one previews as a dry run before Instagram receives anything; the media container is created only on the real call, and video that is still processing comes back as a container the agent can resume.
| Grant | What it governs |
|---|---|
instagram.read | Linked accounts, recent media and engagement counts, and the publishing quota — on by default |
instagram.posts.write | Feed posts: single images and carousels |
instagram.reels.write | Reels |
instagram.stories.write | Stories |
Bounds the gate enforces with arithmetic.
instagram.posts.write · max posts/24h = 3With three API-published posts on the account in the last 24 hours, a fourth is denied before Instagram receives the request. The count is Instagram's own, so posts from other tools count too.
Connect once, use everywhere.
Sign in at gentkey.com, add Instagram (oauth), then point each client at your endpoint. Every client completes a standard OAuth flow and lands in your Gentkey — your connections, nobody else’s.
claude.ai (web & mobile)
- Settings → Connectors
- Add custom connector
- Paste
https://app.gentkey.com/mcpand finish the OAuth prompt
Claude Code
claude mcp add --transport http \
gentkey https://app.gentkey.com/mcpCursor
// .cursor/mcp.json
{
"mcpServers": {
"gentkey": { "url": "https://app.gentkey.com/mcp" }
}
}Things agents do with Instagram here.
- Which of last month's posts got the most comments?
- Post this product photo to @brand with the caption we drafted, as a dry run first.
- Publish the launch video as a Reel and share it to the feed.
Custody, gating, and audit — built in.
The model never sees a credential
Your Instagram token is encrypted at rest and injected server-side at call time. Your stored credential never enters a context window.
Writes need a grant
Anything that changes state needs a capability you granted explicitly — revoke it and the next call is denied.
A trail you can act on
Every decision is attributed to the agent that made it — allowed, denied, or denied by constraint.
Fair questions.
Which Instagram accounts can it post to?
Instagram professional accounts (business or creator) linked to a Facebook Page that the person granted during sign-in. Stories publishing through the API is limited to business accounts.
Can an agent with Reels access post Stories?
No. Feed posts, Reels, and Stories are separate grants, and each can carry a writes-per-hour limit and a cap on posts per 24 hours.
Where does the media come from?
Instagram downloads each image or video from a public https URL at publish time. Images must be JPEG.
What happens when an agent calls a Instagram write tool it hasn't been granted?
The call is denied at the gateway — nothing reaches Instagram — and the denial is recorded in the audit log along with the grant that would have authorized it, so you can decide deliberately instead of finding out later.
Where are my credentials stored?
Encrypted at rest (AES-256-GCM) on Gentkey's server and injected server-side at call time. No credential you store with Gentkey ever enters a model's context window or an agent's config file.
Can I use this from claude.ai's free plan?
Yes — and it's the strongest case for a gateway: free claude.ai accounts currently get a single custom connector, so pointing that one slot at Gentkey puts every connector you've linked behind it.
How do I revoke an agent's access?
Revoke the grant (the next write is denied) or revoke the agent's tokens entirely in one click. Other agents and their grants are untouched — no shared key to rotate.
Is Gentkey affiliated with Instagram?
No. Gentkey is an independent MCP gateway. Trademarks belong to their owners; where an official Instagram MCP server exists, Gentkey proxies it and adds custody, gating, and audit on top.
Often connected together.
Cut Instagram a smaller key.
Sign in, connect Instagram, and grant your first scoped capability in under a minute.